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REMARKS 

This communication is a full and timely response to the final Office Action 
dated April 2, 201 0. Claims 1 -1 1 and 1 3-16 remain pending, where claim 1 2 was 
previously canceled. By this communication, claims 1 , 4, 8, and 10 are amended. 
Support for the amended subject matter can be found, for example, at page 14 lines 
22-25 of the disclosure. 

In numbered paragraph 4, on page 3 of the Office Action, claims 1-1 1 and 13- 
16 stand rejected under 35 U.S.C. §1 03(a) for alleged unpatentability over Aura (US 
6373949) in view of Owada et al. (US 2002/0034306). Applicant respectfully 
traverses this rejection. 

The claimed embodiments are directed to identifying a user terminal at a 
server. During an authentication process, a random number and a public key are 
applied to an asymmetrical algorithm (AA) to produce an encrypted random number. 
At the same time, the random number and a user identifier are provided to the 
symmetrical algorithm, which produces an encrypted identifier. The encrypted 
random number and the encrypted identifier are linked together to produce an 
anonymous identifier. This anonymous identifier is stored in memory of the terminal 
resource and is transmitted to the terminal resource each time the server resource is 
to identify itself to the server resource. 

Independent claims 1, 3, 4, 8, and 10 are distinguishable over the 
combination of Aura and Owada, as each of these claims broadly recite, among 
other features, storing the second identifier in memory, and transmitting the stored 
second identifier to the server resource each time the user terminal resource 
identifies itself to the server resource. 
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Aura discloses an identity protection technique in which a mobile station 
inputs a public key (Kd key) and an identifier (IMSI) to an algorithm to generate an 
encrypted identity. See Aura , col. 5, lines 9-12. The public key is generated by 
inputting a random number and private key (Kh key) into a hash function, kl, col. 4, 
lines 45-49. The encrypted ID and the random number are sent to a home location 
register HLR. The identifier data of the subscriber is always encrypted using a fresh, 
not-previously-used random number, so the network is unable to make a connection 
between the encrypted identities of the user. Id., col. 5, lines 28-32. 

At the HLR, Aura discloses that the public key (Kd key) is computed from an 
algorithm using the private key (Kh key) and random number. ]d., col. 5, lines 33-37. 
The subscriber identity is then deciphered from an algorithm using the public key (Kd 
key) and the encrypted ID. 

Owada discloses security technique in which, to encode data, a storage 
medium generates a random number, which is then used as a symmetrical key to 
encode information. See Owada , pgph [0043]. The random number (symmetrical 
key) is asymmetrically encoded with a public key (asymmetrical key). ]d., pgph 
[0044]. The encoded information and the encoded random number are sent to a 
general purpose processing device for storage . See Id., pgph [0045]. Because the 
general purpose processing device cannot decode the second symmetrical key, this 
device cannot use the stored information. kl, pgph [0046]. When the storage 
medium requests a transfer of the data from the general processing device, the 
storage medium receives the encoded information and the encoded key from the 
general processing device, kl, pgph [0051]. The storage medium decodes the 
encoded random number using a private key (2nd asymmetrical key), kl, pgph 
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[0051]-[0052]. The decoded random number (symmetrical key) is then applied to an 
algorithm to decode the information, kl, pgph [0052]. 

Neither Aura nor Owada, however, disclose or suggest a terminal that 
generates a second identifier as a function of the random number, at least from part 
of the first identifier, and from the result of executing the asymmetrical algorithm and 
the symmetrical algorithm, stores the second identifier, and transmits the second 
identifier to a server each time the terminal identifies itself to the server, as is recited 
in Applicants claims. 

In contrast, Aura discloses that a different random number is used to generate 
the identifier data such that storing the identifier for future identifications is 
unnecessary. The encrypted information generated by Owada is not identification 
data at all, but rather is data that one storage medium is sending to another storage 
device or a general processing device for storage. When the storage medium 
chooses to use the data stored in the other device it sends a request to the other 
device, and executes a decryption algorithm on the received encrypted data. 

Based on the systems and methods described in Aura and Owada, one of 
skill in the art would understand that these references when applied individually or 
collectively, do not disclose or suggest a terminal resource that generates a second 
identifier, stores the identifier, and transmits the stored identifier to a server each 
time the terminal identifies itself to the server as recited in Applicant's claims. For 
these reasons, a prima facie case of obviousness has not been established, and 
withdrawal of this rejection is believed to be appropriate. 
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CONCLUSION 

Based on the foregoing amendment and remarks, Applicant respectfully 
submits that claims 1 -1 1 and 1 3-1 6 are allowable and this application is in condition 
for allowance. Favorable examination and consideration of this application are 
respectfully requested. In the event any unresolved issues remain, the Examiner is 
invited to contact Applicant's representative identified below. 

Respectfully submitted, 
Buchanan Ingersoll & Rooney pc 
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